Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39372e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e39372e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          nP0HSxziresrffuUo4fZxCAXHy63hbMlyp8ztKNqgb0=
Subject key identifier:   99:4E:72:35:4E:FA:77:ED:0A:90:38:DD:F6:80:5E:BA:3A:0A:F7:D0
Certificate issuer:       /CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
Certificate serial:       33E13FA612A9856F4A21AA74F64670C4184610FA
Authority key identifier: C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39372e302f32342d3234203d3e203533313533.roa
Signing time:             Thu 25 Sep 2025 13:35:21 +0000
ROA not before:           Thu 25 Sep 2025 13:30:21 +0000
ROA not after:            Thu 24 Sep 2026 13:35:21 +0000
asID:                     53153
IP address blocks:        187.61.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e1:3f:a6:12:a9:85:6f:4a:21:aa:74:f6:46:70:c4:18:46:10:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
        Validity
            Not Before: Sep 25 13:30:21 2025 GMT
            Not After : Sep 24 13:35:21 2026 GMT
        Subject: CN=994E72354EFA77ED0A9038DDF6805EBA3A0AF7D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0b:39:d6:92:67:71:78:b2:77:1e:c3:aa:5a:
                    7e:d4:3f:02:3a:97:8e:ba:09:cd:a9:4d:dc:81:93:
                    90:6d:3e:69:cd:e7:02:99:b4:f8:fa:d0:89:9a:2c:
                    e5:41:d6:22:a0:72:fb:7c:70:4e:0d:61:7d:84:f5:
                    81:eb:d2:3a:ab:7d:13:a1:1f:43:f0:db:28:2c:df:
                    bc:61:ac:f5:f1:e0:6e:49:a4:e8:a6:53:03:39:b8:
                    14:2c:a1:8b:bd:b7:4b:9d:8c:06:05:9b:6c:5e:34:
                    4d:d8:9c:24:d6:17:2d:9a:d5:27:12:1f:ec:78:24:
                    f3:40:5d:7a:3f:21:32:e4:66:a5:f1:b8:a6:d5:ac:
                    b9:e4:82:77:53:76:5b:c8:df:9e:42:09:4d:74:d4:
                    6a:3b:78:10:53:94:7b:bb:e0:dd:ef:69:a9:fb:1b:
                    ce:19:60:0f:33:9f:78:86:1c:ef:14:ab:c3:c0:65:
                    16:39:9b:b2:47:0b:1e:fa:c3:b4:27:21:e1:cd:94:
                    d0:7a:fb:fa:d2:1f:16:63:b4:e4:22:5f:13:96:b5:
                    80:c2:5d:9d:9a:5a:6f:c6:c5:7c:40:6c:90:f4:6d:
                    cf:7e:86:93:4d:4b:a6:c0:07:99:ca:1c:18:d5:dc:
                    6b:36:ee:54:c6:74:85:e2:0f:41:bd:73:4e:58:86:
                    eb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4E:72:35:4E:FA:77:ED:0A:90:38:DD:F6:80:5E:BA:3A:0A:F7:D0
            X509v3 Authority Key Identifier:
                keyid:C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39372e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:b1:ae:c1:f8:2f:8a:63:9e:d7:9d:20:b6:c1:d8:d6:92:dd:
         77:54:aa:d9:d9:05:6f:41:be:53:34:72:81:00:23:df:97:64:
         48:b5:33:61:2f:38:33:04:7d:06:cd:a2:a0:27:af:36:13:f0:
         2d:2e:f3:c1:58:90:3c:52:7a:2e:e5:08:bb:36:e5:69:0e:e9:
         5b:4e:e3:b2:6c:17:06:f7:49:47:b2:f6:e2:6e:dc:eb:d6:9b:
         62:d2:17:53:4f:a2:8e:f9:4e:cd:09:65:14:3b:62:a0:9e:2d:
         16:44:37:f7:c5:f0:80:60:09:1b:3e:80:0a:42:97:a7:f3:ca:
         3f:1c:e3:3c:41:d4:70:4f:5d:93:84:60:3c:bb:a7:db:04:29:
         39:3b:85:bb:22:58:71:0e:ae:9e:85:93:b9:a6:4f:51:25:57:
         c5:9e:43:6a:58:a3:5e:7b:b5:8a:26:62:b6:a1:f0:fe:b9:37:
         56:91:c9:bf:a4:ce:66:a3:25:4a:ee:16:23:ee:77:3a:2d:a0:
         ac:f6:00:c0:ab:e4:7d:3b:b3:22:2f:df:d4:b4:c9:a8:0b:58:
         e3:22:c6:bf:04:ce:03:06:db:5d:28:d6:0b:d3:2d:4e:a4:40:
         bc:44:df:2e:f5:59:82:8d:be:bb:2e:ca:d4:3a:19:19:62:9e:
         73:58:11:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:25:59 2025 by rpki-client